Chronosite 5.12 – SQL Injection

• Exploit Database
• 14 阅读

• 作者： Wadeek
  日期： 2015-05-18
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/37050/

• # Exploit Title: Chronosite 5.12 SQL Injection
  # Google Dork: filetype:php inurl:"/archives.php" intext:"ARCHIVES Chrono-site"
  # Date: 13/05/15
  # Exploit Author: Wad Deek
  # Vendor Homepage: http://www.chronosite.org/
  # Software Link: http://www.chronosite.org/chrono_upload/chronosite_512.zip
  # Version: 5.12
  # Tested on: Xampp on Windows7
  ################################################################
  PoC = http://127.0.0.1/cms/chronosite_512/archives.php?numero=%27
  ################################################################